A big shock to the Boards of Directors and CEOs of many companies is that they view the cybersecurity sector as exclusive to the CIO and the company’s technical department.
Many companies have shaped their corporate technology into multiple levels of legacy systems that alone cannot meet the requirements of today and on them are added other new systems creating increasing complexity. Simplicity is absent in these cases.
Inherited structures and systems are perforated, with insecure connections, which can be easily breached by attackers. At the same time, this digital complexity also raises costs to high levels without achieving a high degree of cyber-security.
Cyber-attacks are constantly increasing in addition to the catastrophic effects and increasing extortion for ransom.
If a company is not characterized as “digitally indigenous” who gain an advantage of simplicity in digital technology, then the CEO and the Board. of the company should adopt some basic principles:
1. Ensuring that their strategic moves will not increase technological thus complexity and risk.
2. Understand that the transition to technological simplicity may require structural changes to the company’s operating model.
2a. Review at a higher level of business plans.
2b. Reducing complexity can provide greater transparency by reducing them problems that often
occur in relationships with external partners, giving the ability for all parties to better
understand their role.
2c. Examination of internal procedures and systems for any risks. The obsolete processes
sometimes combined with old technology can put a system out of availability. Complexity
increases the chances of occurrence of more frequent interruptions and long-term failures.
All this should be combined with a better action plan to ensure the technological security of the company.